Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/72c0e7b7-4e9f-37d3-b1da-4eda7818129d.roa
File:                     72c0e7b7-4e9f-37d3-b1da-4eda7818129d.roa (raw, json)
Hash identifier:          GotxOxEeL2DLjPwoMTg+f6kp2x2blhIjaXtOU1COyvw=
Subject key identifier:   27:A7:C2:2F:81:84:FA:2B:76:20:11:3E:3E:B4:03:CA:DD:5B:95:BE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848AF2BA38C11B778975C6ED000
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/72c0e7b7-4e9f-37d3-b1da-4eda7818129d.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     18779
IP address blocks:        136.0.249.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:a3:8c:11:b7:78:97:5c:6e:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=74c37c1e-694a-4443-b031-74f3712dc755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e6:3e:57:f1:ae:2e:d9:9e:6d:04:8d:8c:40:
                    26:cf:f9:77:5b:45:92:9c:bf:8f:97:8d:b7:24:be:
                    a1:ec:e5:b4:5d:7c:ab:bb:c8:aa:ba:f0:8f:40:2f:
                    68:91:45:f8:42:f8:ac:54:56:61:cf:df:eb:b2:4e:
                    06:76:22:16:7f:51:89:89:7b:c3:c7:97:0c:5e:fa:
                    9a:ce:a9:92:80:6b:5d:49:c4:2b:d4:f8:0b:f6:54:
                    85:60:6f:4a:c2:0f:9b:23:d7:ee:81:17:44:84:4b:
                    41:09:91:c4:1b:d0:c9:c6:91:06:fa:3a:f2:2b:6b:
                    5e:72:63:1d:e3:a2:0e:b6:31:a8:af:2a:80:4a:b8:
                    59:0e:58:7f:99:d0:b5:1a:34:2e:fb:85:a9:5b:c9:
                    82:80:18:54:fd:1e:f4:27:20:a5:98:8e:42:2d:dc:
                    c9:f4:17:17:a9:b1:54:ef:a9:a1:3a:ba:03:c0:89:
                    4b:61:73:2c:99:ef:04:47:c5:cc:86:f0:45:e3:b1:
                    b5:80:44:75:5e:b6:98:9d:a6:81:c5:f7:d0:02:a1:
                    03:ba:ba:8d:e4:89:a6:b3:21:6e:1e:20:35:a0:58:
                    5d:34:da:b7:59:93:ac:1c:11:2d:07:7f:96:14:1b:
                    0a:28:e5:b5:bb:f5:ea:dc:98:db:c5:5e:a0:cd:78:
                    14:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A7:C2:2F:81:84:FA:2B:76:20:11:3E:3E:B4:03:CA:DD:5B:95:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/72c0e7b7-4e9f-37d3-b1da-4eda7818129d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:80:02:f7:ce:70:f5:c5:e7:f1:e5:6f:b8:b7:2f:e2:88:3d:
         76:66:62:cf:9e:a0:11:fa:16:df:d0:ed:e7:7e:49:a3:6f:d4:
         78:7d:6c:e4:8b:ba:59:9f:80:b7:04:49:c1:db:a1:a0:74:13:
         e3:af:4b:c6:43:ee:a2:d1:fc:ce:a2:30:59:19:58:9a:69:f3:
         ca:30:aa:ea:4f:ee:6d:a6:3a:49:d6:97:c0:0a:f8:22:21:a5:
         fc:0d:3c:8f:da:27:18:61:56:37:4e:4d:1a:13:93:a9:68:26:
         65:1e:ae:05:87:56:56:7b:9a:8a:b5:ba:0a:73:59:cf:04:69:
         9f:0e:91:bd:a7:e8:6e:07:9b:a9:7a:ce:e7:bf:ce:03:cc:90:
         21:27:85:48:27:ac:62:76:d6:d8:e1:16:a4:25:7d:84:82:e7:
         5d:30:5d:00:3b:20:2f:93:59:c0:48:51:42:ed:cf:84:3f:2a:
         13:21:bc:99:83:a0:39:92:ab:13:38:96:c3:f6:40:34:ef:37:
         fb:10:2c:cd:27:50:8c:74:85:39:2d:11:18:fb:96:74:f6:c3:
         22:43:a4:fc:d4:30:84:65:07:0a:f0:b6:8e:66:36:7c:b4:c0:
         cf:70:44:cb:ce:00:e7:c8:e9:29:e8:4f:ff:06:16:82:c0:9d:
         ba:e5:bf:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:07:07 2025 by rpki-client